This now makes for my third (unsuccessful) attempt at “upgrading?” from NIS2011 to NIS2012.
Everything always starts off fine and remains so for a day or two. Then this unusual high CPU utilization behavior starts. This always occurs after a Liveupdate triggers a quick background scan. Moving the mouse or tapping a key causes the “Quickscan completed” popup to slide in at the lower right corner of the screen, yet the high CPU utilization continues at approx. 45% to 50% on the ccSvcHst.exe as shown in this screen capture.
This heavy CPU usage continues for another half to three-quarters of an hour and there's nothing I can do to halt it. I’ve tried using task manager to end the ccSvcHst.exe process as well as the entire ccSvcHst.exe process tree. Trying to do so only produces an access permission denial message. I can reboot the computer which will cause the Windows7 "waiting for tasks to shutdown" screen to hang onscreen for the remainding duration of whatever it is that ccSvcHst.exe is up to.
FWIW: I can instantly resolve this problem by reverting to NIS2011.
Yes I have, however doing so leads to the “Device connect failure” warning beeps referred to in another message thread in this forum (located here): Strange sounds at startup ("Device Failed to Connect" sound). And after all that, the original high CPU issue remains unaltered/unimproved after the full reinstallation is completed + the newly induced beep problem each time the system is booted.
This now makes for my third (unsuccessful) attempt at “upgrading?” from NIS2011 to NIS2012.
Everything always starts off fine and remains so for a day or two. Then this unusual high CPU utilization behavior starts. This always occurs after a Liveupdate triggers a quick background scan. Moving the mouse or tapping a key causes the “Quickscan completed” popup to slide in at the lower right corner of the screen, yet the high CPU utilization continues at approx. 45% to 50% on the ccSvcHst.exe as shown in this screen capture.
This heavy CPU usage continues for another half to three-quarters of an hour and there's nothing I can do to halt it. I’ve tried using task manager to end the ccSvcHst.exe process as well as the entire ccSvcHst.exe process tree. Trying to do so only produces an access permission denial message. I can reboot the computer which will cause the Windows7 "waiting for tasks to shutdown" screen to hang onscreen for the remainding duration of whatever it is that ccSvcHst.exe is up to.
FWIW: I can instantly resolve this problem by reverting to NIS2011.
That occurrs even after removing the program first via add/remove before running the tool? You can also do the removal in safe mode, which might leave your drivers intact if they are not loaded.
No - the "Beep" condition does not occur if I simply use Windows7 Control Panel "Programs and Features" to remove NIS2012. However it does occur if I use Norton Removal Tool but not until I reinstall NIS2012. This happens regardless of the combination or order used - safe mode or otherwise, with or without first using control panel to uninstall - if the Norton Removal Tool is used and NIS2012 is then reinstalled (after previously being installed) the "Beep" condition will occur. Uninstalling NIS2012 again ends the warning “Beep”. Also note that there are no devices tagged as being “Unknown”, or “Missing Drivers / Components” in Windows Device Manager, yet the warning "Beep" persists on boot, and just as the other poster reported, always with three separate and distinct "Beep" occurrences, each occurrence separated by a few seconds during the boot process. Also note that the high CPU utilization problem returns again as soon as NIS2012 is reinstalled.
And another "new revelation" I (just) found is that uninstalling NIS2012 seems to somehow disable the NIS2011 Junk Mail (toolbar) office plugin in Outlook2010.
We’ve managed to solve all of the numerous NIS2012 problems that we’ve been encountering on our three NIS2012 “testing systems” for the last couple of weeks by simply reverting them all back to NIS2011... To do this successfully however, all three required complete HD system image restorations to pre-NIS2012 exposure point – this was necessary since NIS2012 simply cannot be uninstalled cleanly and using the Norton Removal Tool further complicates the issues left behind by NIS2012’s removal. All said and done though, all three system are once again behaving normally.
I want to further clarify my previous post. It may have sounded like reverting to NIS2011 then back to NIS2012 was our ultimate solution. It was not.
We have reverted to NIS2011 and stayed on NIS2011 to solve these various problems. We also intend to continue using NIS2011 until we begin to see some postings here indicating that Symantec has managed to solve some of the more major issues with NIS2012.
I have a hypothetical question regarding the screenshot in message # 1, since it's possible that we have another user here in the forum having the same problem.
Is it possible that this spike in CPU activity by ccSvcHst.exe was caused by the NIS real-time protection or heuristic detection and has nothing to do with a background idletime Norton Task? For instance, if there's a scheduled task on the computer (e.g., a Malwarebytes' Anit-Malware scan) and the .exe or .dll file is untrusted by NIS, wouldn't the real-time protection in NIS crank up and simultaneously run in the background monitoroing the suspicious CPU/Memory/Disk/Handles?
If the high CPU activity shown in message # 1 is caused by a background task like a Idle Quick Scan, I would expect that clicking on that region of the graph would show ccSvcHst.exe as the only active process and that the Last Run date in the Norton Tasks window would correspond to the time the high CPU occurred. I see a bit of blue (non-Norton) overlaying the yellow Norton peaks in that screen shot in message # 1 which indicates to me that some other process besides ccSvcHst.exe was also using CPU.
I can't figure out if the new Norton Job Scheduler in NIS 2012 is having problems detecting when the system comes out of idle mode now that NIS 2012 is no longer using the Windows Task Scheduler to schedule Norton tasks (despite the claim that the Norton Job Scheduler "does an excellent job of detecting idle time" in the article What's New in Norton Internet Security 2012 - see section on Custom Scans the Norton Way) or if there's something odd with the NIS Insight application trust ratings or real-time protection / heuristic detection that causes NIS 2012 to behave very aggressively with certain applications.
----------
Windows Vista Home Premium 32-bit SP2 * NIS 2011 v. 18.6.0.29 * IE 9.0 * Firefox 6.0 HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400 GS
I'm still not sure we're dealing with the same issue in both posts. LX3 still hasn't finished investigating if ccSvcHst.exe is causing the high CPU usage here and is just assuming that an unfinished Idle Quick Scan is the culprit
---------
Windows Vista Home Premium 32-bit SP2 * NIS 2011 v. 18.6.0.29 * IE 9.0 * Firefox 6.0 HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400 GS
I can't figure out if the new Norton Job Scheduler in NIS 2012 is having problems detecting when the system comes out of idle mode now that NIS 2012 is no longer using the Windows Task Scheduler to schedule Norton tasks (despite the claim that the Norton Job Scheduler "does an excellent job of detecting idle time" in the article What's New in Norton Internet Security 2012 - see section on Custom Scans the Norton Way) or if there's something odd with the NIS Insight application trust ratings or real-time protection / heuristic detection that causes NIS 2012 to behave very aggressively with certain applications.
Though it is not shown in the screen clip due to cropping of the lower portion of the display area, the Windows task manager was set for "Show processes from all users" and the task list display was sorted by CPU usage (highest use processes at top) order.
Prior to the point at which this screen capture was taken, and even though the system was being heavily utilized by foreground activity, a "Quickscan Beginning" notification scrolled in at the lower right corner of the screen. Immediately moving the mouse pointer caused the notice to scroll off screen, which one would assume would have halted the scan. However, as you can see, ccSvcHst.exe continued on it merry way of chewing up exorbitant amounts of CPU time.
Also please note that after the system was restored to NIS2011 these CPU utilization excursions ceased.
I sent a PM to one of the tech gurus to see if someone with advanced troubleshooting skills and experience with NIS 2012 can make sense of this. I provided links to all 3 related posts.
------
Windows Vista Home Premium 32-bit SP2 * NIS 2011 v. 18.6.0.29 * IE 9.0 * Firefox 6.0.0 HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400 GS
After reading AllenM's post I re-checked the Known Issues With NIS 19.1 post here and noticed that there is now a link pointing here for the issue After upgrading to NIS 2012, some tasks in Task Scheduler appear to be left over from NIS 2011. There appears to be a problem because NIS 2012 now uses its own built-in task scheduler (see the section Custom Scans the Norton Way in the article What's New in Norton Internet Security 2012) instead of the native Task Scheduler in your Win OS as NIS 2011 did.
I'm not certain if this has anything to do with the Norton Removal Tool leaving behind some residual files in the C:\Program Files\Norton Internet Security\ folder (see RichD's post here) or if the problem resides entirely with residual NIS 2011 tasks scheduled in the WIndows Task Scheduler. My best advice at this point, for what it's worth, is that you roll back to NIS 2011 using PapauZ's instructions here and keep an eye on the Known Issues With NIS 19.1 post here for further updates if the high CPU problem outside of idle mode in NIS 2012 is currently causing a serious problem.
Kudos to AllenM for letting us know that Symantec is investigating the problem, and kudos to all of you for catching this bug. Persistence is a good thing, Donkey!
And further kudos to delphinium. It looks like you were on the right track with your comment in message # 2 about the leftover NIS 2011 scan.
------------
Windows Vista Home Premium 32-bit SP2 * NIS 2011 v. 18.6.0.29 * IE 9.0 * Firefox 6.0.0 HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400 GS
Let me stress that the Disk Thrashing and high CPU utilization, only happens (in my case) during the Idle state on the computer. I have managed to check on the ccSvcHst.exe process time and it appears to be the culprit.
I do remember something like this either the first few weeks of NIS 10/11.
Atomic_Blast :)
P.S. Thank you, avjohnnie for removing that Solution mark.
I just wanted to update this thread along with the other related threads that we are aware of the problem and I am working on getting this resolved. I will update this thread once the fix goes into an update that is available to the user-base for download.
Thank you everyone for the detailed posts here, which made it easier for me to debug the issue.
